France FR

The EU's 21st Russia sanctions package, adopted 23 July 2026, is this cycle's material sanctions-architecture event for France. The package adds 48 individuals and approximately 168 to 170 entities to the asset-freeze and travel-ban list, targeting the financial, energy, crypto, and military-industrial sectors, and explicitly reaches third-country enablers involved in shipping and technical management of sanctioned assets. Thirty-three additional Russian credit and financial institutions were added to Annex XIV, effective 13 August 2026, widening the correspondent-banking screening burden for French financial institutions.

The architecture-relevant feature is direct applicability: as a Council Regulation, the package binds France immediately upon EU adoption with no domestic transposition step, in contrast to a Directive-based instrument that would carry a transposition lag. This structural characteristic means France's sanctions exposure moves in lockstep with EU Council decisions rather than on a domestically-set legislative timetable, and it reflects a broader escalating trajectory across the 20th and 21st packages toward third-country enabler reach rather than direct-target designations alone.

Outlook

The next materially relevant marker is any further Council package extending enabler-jurisdiction reach beyond shipping and technical-management facilitators, and whether France's implementing authorities publish updated screening guidance tied to the expanded Annex XIV credit-institution list. This sub-brief rests on Tier-3 legal-alert sourcing rather than a direct EUR-Lex or Council primary fetch this cycle, a gap that should be closed before the next assessment.

The durable structural backdrop for beneficial-ownership and corporate-transparency findings in any EU Member State, including France, is the EU AML Package's three distinct instruments: the directly-applicable AML Regulation (AMLR, Regulation (EU) 2024/1624), the sixth AML Directive (6AMLD, transposed per Member State), and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority. AMLA's build-out shifts supervision from a purely national model toward a hybrid EU-level regime, with direct and indirect supervisory perimeters over cross-border obliged entities. This architecture is the standing frame against which this cycle's France-specific signal should be read, and it is not itself a single-cycle development.

Within that frame, France has moved ahead of the EU-wide 10 July 2026 AMLD6 transposition deadline for beneficial-ownership-register provisions: public access to the INPI-administered UBO register is now limited to holders of a three-year certificate demonstrating a recognised legitimate interest, consistent with the AMLD6/AMLR shift away from unrestricted public access following the relevant CJEU ruling. UBO citizenship data continues to be withheld from disclosure, a standing transparency gap that predates this cycle. The certificated-access finding rests on a single Tier-4 source without Tier-1 or Tier-2 corroboration this cycle, so confidence is capped at Assessed rather than High, and France's precise domestic transposition instrument was not independently confirmed against a primary French gazette source.

Outlook

AMLA's first Regulatory Technical Standards package, due by 10 July 2026 and not independently confirmed as published this cycle, will convert the AMLR's general obligations into operational CDD, beneficial-ownership-threshold, and screening specifications once issued. Independent confirmation of France's specific transposition vehicle for the AMLD6 BO-register tranche, and of AMLA's RTS publication status, are the two items most likely to sharpen this domain's picture next cycle.

A Eurojust-coordinated joint investigation team led to 13 arrests across France and Romania in a network suspected of laundering at least EUR 306 million in proceeds from drug trafficking and other illicit activity between 2018 and 2024. The network used multiple French legal entities to channel funds, illustrating that domestic corporate-formation infrastructure, not only classic offshore enabler jurisdictions, can function as a laundering conduit. This is a Tier-1, High-confidence finding sourced directly from Eurojust's own announcement, with specific arrest and monetary figures rather than general characterisation.

Read architecturally rather than as an isolated incident, the case is a reminder that enabler-jurisdiction risk is not confined to jurisdictions with permissive corporate-registration regimes; a well-regulated Member State's own legal-entity infrastructure can be instrumentalised where cross-border laundering networks exploit the ease of French entity formation alongside weaker-oversight counterpart jurisdictions such as Romania in this case. The episodic nature of the finding, a single coordinated law-enforcement action, means it illustrates rather than establishes a structural pattern this cycle.

Outlook

What would elevate this from an episodic enforcement event to a structural finding is a subsequent Eurojust or French prosecutorial disclosure identifying the specific corporate-formation mechanism exploited, and whether it recurs across unrelated investigations. No further France-specific enabler-jurisdiction development was identified this cycle beyond the Eurojust action.

The MiCA cutover has become an active supervisory chokepoint in France this cycle. The AMF's enforcement of the 1 July 2026 hard cutover from the national PSAN/DASP registration regime to full MiCA CASP authorisation moved from a transitional-period reminder into active enforcement: roughly 90 legacy PSAN/DASP firms faced the deadline, and the AMF has begun formally withdrawing the registrations of non-compliant firms, with AUTOMATA France SAS's registration withdrawn effective 30 June 2026 as the concrete example in evidence this cycle. This is a genuine AML/CFT-relevant supervisory event, not merely a prudential licensing transition: unauthorised activity after the cutover is a criminal offence in France, carrying up to two years' imprisonment and a EUR 30,000 fine, which materially raises the stakes of non-compliance relative to a purely administrative registration lapse.

The scale of the exposed cohort, roughly 90 firms facing a hard deadline simultaneously, is itself the analytically significant feature: it creates a concentrated supervisory event in which the AMF must process compliance determinations, wind-down plans, and enforcement actions across a large population of firms in a compressed window. This is the kind of structural chokepoint that, viewed architecturally, tests whether a supervisor's capacity can keep pace with a hard regulatory cutover, rather than a single enforcement incident against one bad actor. The AMF's demonstrated willingness to withdraw registrations, as shown in the AUTOMATA France SAS case, indicates the cutover is being actively enforced rather than allowed to lapse into informal tolerance.

Separately, the EU's Russia sanctions packages extended crypto-specific prohibitions directly applicable in France, including measures targeting the A7A5 stablecoin and RUBx, and a ban on EU support for the digital ruble. These sanctions-nexus facts sit at the intersection of this domain and the D1 sanctions-architecture finding, underscoring that crypto-specific financial-innovation oversight in France is increasingly shaped by sanctions considerations as much as by MiCA's own authorisation regime.

Outlook

The key marker to watch next cycle is the disposition of the remaining legacy PSAN/DASP firms that have not obtained MiCA authorisation: whether they complete authorisation, enter orderly wind-down, or face further AMF registration withdrawals will determine whether this cutover resolves as an orderly transition or a disorderly supervisory event. Confirmation of the precise current count of still-unauthorised firms would materially sharpen this picture.

France's AML/CTF regime continued to operate under the standing AMF/TRACFIN supervisory framework this cycle, with active enforcement against the standing baseline. On 30 June 2026, the AMF Enforcement Committee fined an investment services provider and its director a combined EUR 850,000 for AML/CFT-adjacent failings, a Tier-1, High-confidence enforcement action sourced directly from the AMF's own publication. The AMF separately published a summary of its 2026 AML/CFT inspection findings, continuing supervisory pressure on obliged entities' suspicious-transaction-reporting and TRACFIN alignment more broadly than the single enforcement action alone would suggest.

This domain also intersects with the MiCA cutover covered under D5: the AMF's willingness to withdraw registrations from non-compliant crypto-asset service providers is itself an AML/CFT-relevant supervisory action, since unauthorised crypto-asset activity outside the regulated perimeter removes those firms from TRACFIN-aligned reporting obligations entirely. Read together, the EUR 850,000 investment-services fine and the crypto-cutover enforcement activity indicate an AMF posture of active supervisory pressure across both traditional and digital-asset-adjacent obliged entities this cycle, rather than a quiet or purely administrative period.

France's current FATF mutual-evaluation round status was not identified this cycle, and France was not named in the June 2026 FATF Plenary's grey-list movements, remaining outside increased monitoring, though this latter fact is a standing tracker position rather than a fresh finding.

Outlook

The AMLA RTS package, due by 10 July 2026 and not independently confirmed as published this cycle, will eventually convert AMLR's general obligations into binding technical standards applicable to France as an EEA member; its publication status is the most consequential AML/CTF-regime item to confirm next cycle. Whether the AMF publishes further inspection-findings summaries, and whether additional enforcement actions follow the EUR 850,000 fine, are the near-term markers to watch.